A register kept in confidence.
This policy describes what we collect from correspondents and visitors to the archive, how we use that information, and the limits we place on its disclosure.
Last revised · April 2026
Particulars we collect.
P1.01Provided by you. When you register, place an order, or correspond with the house, we collect particulars such as your name, institutional affiliation, email, postal address, phone number, and order details.
Collected automatically. When you visit the archive, we may collect device and session information — IP address, browser class, referral path, and pages viewed — to secure the site and understand how it is used.
Payment particulars. Card and bank details are handled by third-party payment processors under PCI-DSS obligations; the house does not store full card numbers on its own servers.
How we use it.
P1.02We use the particulars you provide to verify eligibility, fulfil orders, dispatch correspondence and certificates of analysis, respond to enquiries, and meet our record-keeping obligations under the research-use-only policy. We use collected session information to maintain the security and performance of the site.
Third parties with whom we correspond.
P1.03Particulars are shared only with the service providers required to operate the house: our payment processor, our shipping carrier, the courier’s tracking service, our analytics provider, and any legal, accounting, or compliance advisors acting on our behalf. Each is bound by confidentiality and data-protection obligations commensurate with the particulars shared.
We do not sell personal information, and we do not share it for the behavioural advertising of unrelated products.
Cookies and similar technologies.
P1.04The archive uses a small number of cookies and similar storage mechanisms: essential cookies to operate the cart and the age notice, and analytics cookies to understand aggregate site use. You can manage cookies through your browser. Disabling essential cookies may prevent the cart or age notice from functioning as intended.
Retention.
P1.05We retain order records and correspondence for the period required to support customer service, research-use compliance, tax, and accounting obligations — typically seven years. Registry email addresses are retained until the registrant asks to be removed.
Your rights.
P1.06Subject to applicable law, you may ask us to confirm what particulars we hold about you, correct inaccuracies, or delete information that is no longer required. Residents of jurisdictions with statutory privacy rights — including California under the CCPA/CPRA and individuals protected by the GDPR — may exercise those rights by writing to the address below.
Children’s privacy.
P1.07The archive is restricted to visitors aged twenty-one and over. We do not knowingly collect information from anyone under that age. Where we discover that such information has been collected in error, we will delete it promptly.
International correspondence.
P1.08The archive is hosted in the United States. Correspondents in other jurisdictions should be aware that their particulars will be transmitted to and processed in the United States, subject to the safeguards described in this policy.
Security.
P1.09We take reasonable administrative, technical, and physical safeguards to protect particulars from unauthorised access, alteration, or disclosure. No system, however, is perfectly secure; correspondents should use institutional email and avoid transmitting sensitive personal information through insecure channels.
Changes to this policy.
P1.10When we revise this policy, the “Last revised” date above will change, and material revisions will be announced to registered correspondents where reasonably possible. Continued use of the archive after revision constitutes acceptance of the revised policy.
Contact for privacy requests.
P1.11Privacy requests should be addressed to privacy@fortresspeptides.com, with enough detail to allow us to verify the request and respond within the period required by law.